2x过大量

Sherry.ai

To KL

[ 本帖最后由 935623508 于 2009-1-9 14:28 编辑 ]

一下子丫

过红伞
the 1ST

25228051

msnetprofm.dll

375 KB

UNDER ANALYSIS

THE 2RD

25228060

2000[1].dll

39.5 KB

UNDER ANALYSIS

[ 本帖最后由 一下子丫 于 2009-1-9 14:35 编辑 ]

gomu887

文件 msnetprofm.rar 接收于 2009.01.09 07:28:22 (CET)

反病毒引擎	版本	最后更新	扫描结果
a-squared	4.0.0.73	2009.01.09	-
AhnLab-V3	2009.1.9.0	2009.01.08	-
AntiVir	7.9.0.45	2009.01.08	-
Authentium	5.1.0.4	2009.01.08	-
Avast	4.8.1281.0	2009.01.08	-
AVG	8.0.0.229	2009.01.08	-
BitDefender	7.2	2009.01.09	-
CAT-QuickHeal	10.00	2009.01.08	-
ClamAV	0.94.1	2009.01.09	-
Comodo	895	2009.01.08	-
DrWeb	4.44.0.09170	2009.01.08	-
eSafe	7.0.17.0	2009.01.08	Suspicious File
eTrust-Vet	31.6.6299	2009.01.09	-
F-Prot	4.4.4.56	2009.01.08	-
Fortinet	3.117.0.0	2009.01.09	-
GData	19	2009.01.09	-
Ikarus	T3.1.1.45.0	2009.01.09	-
K7AntiVirus	7.10.582	2009.01.08	-
Kaspersky	7.0.0.125	2009.01.09	-
McAfee	5489	2009.01.08	-
McAfee+Artemis	5489	2009.01.08	-
Microsoft	1.4205	2009.01.08	-
NOD32	3752	2009.01.08	-
Panda	9.4.3.3	2009.01.08	-
PCTools	4.4.2.0	2009.01.08	-
Prevx1	V2	2009.01.09	-
Rising	21.11.40.00	2009.01.09	-
SecureWeb-Gateway	6.7.6	2009.01.09	-
Sophos	4.37.0	2009.01.09	Sus/Behav-1010
Sunbelt	3.2.1831.2	2009.01.09	-
Symantec	10	2009.01.09	-
TheHacker	6.3.1.4.214	2009.01.09	-
TrendMicro	8.700.0.1004	2009.01.09	-
VBA32	3.12.8.10	2009.01.08	suspected of Backdoor.XiaoBird.50 (paranoid heuristics)
ViRobot	2009.1.9.1551	2009.01.09	-
VirusBuster	4.5.11.0	2009.01.08	-
附加信息
File size: 373427 bytes
MD5...: d46a5a8b71f89a5139bd4a331cd886e2
SHA1..: f35ad8cd8a723a5f353cc2f86796ec52d11f91e6
SHA256: dd10284bfc0c33066ea82afc76be160d8a074982c4b37759aee72a427b7176c5
SHA512: 69704829457b87df151621e0484f7aff620c122f3217317556ad90913f8fde58<BR>6dcb11dff36e70130f06d65251cd34e472ce04a459480ee120281a0b69dbf5c1<BR>
ssdeep: 6144:8y7Cz6EIRbLZ5AMuiG91EFF5upjjKlsWTawBuPFZXmXDBBB8f/uce:8yW9E<BR>LZRuiGE3upjjusWT7OTWzt8fM<BR>
PEiD..: -
TrID..: File type identification<BR>RAR Archive (83.3%)<BR>REALbasic Project (16.6%)
PEInfo: -
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX

su-tt

上报ESET

Sherry.ai

2000[1].rar 里的应该是PE文件...
刚才没发现

sound886

里面好像都是单个的dll文件啊，FS扫描飘

Sherry.ai

2000里的那个改成.exe就能运行

The EQs

eset将会下次升级添加其特征码，thanks

尤金卡巴斯基

not-a-virus:AdWare.Win32.BHO.fci

尤金卡巴斯基

Hello,

2000[1].dll - Trojan-Downloader.Win32.Agent.bcbq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.